Security hardening, auth event logging, and a fix for real-time updates dropping when closing a window.
- Beefed up our Content-Security-Policy headers with additional directives, further hardening the dashboard against cross-site scripting and injection attacks.
- Fixed a bug where closing a window could knock out real-time updates for all your connected browser tabs. If you ever noticed service states going stale and had to do a full page refresh — that was this guy. Squashed!
- Added logging for successful and failed login and logout events to improve authentication auditing and security visibility.
- Added Subresource Integrity (SRI) hashes to externally-hosted stylesheets, so your browser can verify they haven’t been tampered with before loading them.
